CVE-2024-54019

MEDIUM4.8

A improper validation of certificate with host mismatch in Fortinet FortiClientWindows version 7

Published Jun 10, 2025

Modified 8 months ago

Details

A improper validation of certificate with host mismatch in Fortinet FortiClientWindows version 7.4.0, versions 7.2.0 through 7.2.6, and 7.0 all versions allow an unauthorized attacker to redirect VPN connections via DNS spoofing or another form of redirection.

Affected Packages

FortiClient

Windows 10 (1507)Windows 10 (1607) / Server 2016Windows 10 (1809) / Server 2019Windows 10 (1903)Windows 10 (1909)

Affected versions:

7.4.0

References

ADVISORY

https://fortiguard.fortinet.com/psirt/FG-IR-24-365

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2024-54019

Aliases

FG-IR-24-365